ISO 27001 Log Retention Requirements: What Auditors Expect

ISO 27001 Log Retention Requirements: What Auditors Expect

ISO 27001 log retention requirements come down to one rule. The standard sets no number of days or years, but it does require you to log security events, protect those logs, and keep them for a period you have defined, justified and can prove you follow. In practice, 12 months is the most commonly recommended […]

ISO 27001 Compliance Training: 6 Courses to Choose From

ISO 27001 Compliance Training: 6 Courses to Choose From

The best ISO 27001 compliance training is the training that matches each person’s role in your information security management system (ISMS). Everyone needs short awareness training. The person running the project needs a foundation course and an implementation course. The people who check your ISMS need an internal auditor course. A lead implementer or lead […]

Business Continuity Planning Consultants: 5 Types Compared

Business Continuity Planning Consultants: 5 Types Compared

The best business continuity planning consultants have delivered your kind of plan before, name the person who will do the work, and leave you able to run the plan yourself. If your biggest risk is a cyber attack or IT outage, a cyber-led provider such as TrustedIA fits best. If you need a programme across […]

What Is a Strategy for Business Continuity Planning?

What Is a Strategy for Business Continuity Planning?

A strategy for business continuity planning is the high-level decision about how your organisation will keep its critical activities running, and get them back, when something disrupts them. It sets your priorities, your recovery targets, the resources you commit and the people who decide. The plan, with its checklists and contact lists, comes afterwards and […]

Data Protection in Financial Services: Rules and Controls

Data Protection in Financial Services: Rules and Controls

Data protection in financial services means the legal duties, policies and technical controls that keep customer financial and personal data private, accurate and available. In the UK, it starts with UK GDPR and the Data Protection Act 2018, with FCA and PRA expectations on top. In practice, you need to know what data you hold, […]